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IN THE CLAIMS: 

The text of all pending claims (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

1 . (PREVIOUSLY PRESENTED) A security system comprising an information 
management system that manages information and an encryption support system that supports 
encryption of information in the information management system, 

the encryption support system including 

an encryption rule storing portion that stores rule information that indicates an encryption 
rule of the information for each secret level that is a level of wanting to keep information secret, 

an encryption data transmitting portion that transmits encryption data that is necessary 
for encrypting information in accordance with the rule to the information management system, 

a process information receiving portion that receives process information that indicates 
the encryption process performed by the information management system from the information 
management system, 

a monitoring portion that monitors whether or not the encryption of information is 
performed in accordance with the rule by the information management system on the basis of 
the process information received from the information management system, and 

a warning portion that warns the information management system that was found to 
encrypt information not in accordance with the rule by the monitoring portion to do encryption of 
information in accordance with the rule, and 

the information management system including 

an encryption data receiving portion that receives the encryption data from the encryption 
support system, 

a classification secret level storing portion that stores classification of information 
managed by the information management system in connection with the secret level for each of 
the classification, 

an encrypting portion that encrypts information managed by the information management 
system by using the encryption data of the secret level corresponding to the classification of the 
information received by the encryption data receiving portion, 
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an information storing portion that stores the information encrypted by the encrypting 
portion, and 

a process information transmitting portion that transmits the process information about 
the encryption performed by the encrypting portion to the encryption support system. 

2. (ORIGINAL) The security system according to claim 1 , wherein the rule 
information indicates the rule including an encryption system that is used for encryption and a 
valid term of an encryption key that is used for the encryption, 

if a period since the information management system encrypted information until the 

present time exceeds the valid term relevant to the rule of the secret level corresponding to the 

classification of the information, 

the warning portion warns the information management system, 

if the encryption system that is indicated in the rule information is changed, 

the encryption data transmitting portion transmits the encryption data for performing 

encryption with the changed encryption system to the information management system, and 
the warning portion warns to perform encryption of information in accordance with the 

changed encryption system. 

3. (PREVIOUSLY PRESENTED) The security system according to claim 1, wherein 
the information management system includes 

a classification secret level transmitting portion that transmits classification secret level 
information that indicates classification of information managed by the information management 
system and the secret level corresponding to the classification to the encryption support system, 
and 

the monitoring portion performs the monitoring by comparing the process information 
received from the information management system with the classification secret level 
information. 

4. (PREVIOUSLY PRESENTED) The security system according to claim 1 , further 
comprising a valid term managing portion that manages a valid term of a certification for affixing 
an electronic signature to information, wherein 

the monitoring portion monitors whether or not it is necessary to reaffix the electronic 
signature to the information in accordance with the valid term of the certification, and 
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the warning portion warns the information management system for managing the 
information to reaffix the electronic signature if it is decided that it is necessary to reaffix the 
electronic signature. 

5. (PREVIOUSLY PRESENTED) An information management system that 
manages information and receives support for encrypting information from an encryption support 
system, comprising: 

a receiving portion that receives rule information that indicates an encryption rule of 
information defined for each secret level that is a level of wanting to keep information secret and 
encryption data that are necessary for encrypting information in accordance with the rule from 
the encryption support system; 

a classification secret level storing portion that stores classification of information 
managed by the information management system for each classification in connection with the 
secret level; 

an encrypting portion that encrypts information managed by the information management 
system by using the encryption data of the secret level corresponding to the classification of the 
information received by the receiving portion; 

an information storing portion that stores the information encrypted by the encrypting 
portion; and 

a process information transmitting portion that transmits process information that 
indicates the encryption process performed by the encrypting portion to the encryption support 
system so as to receive a check whether or not the encryption of the information was performed 
in accordance with the rule. 

6. (PREVIOUSLY PRESENTED) An encryption support system that encrypts 
information and supports an information management system that manages information, the 
encryption support system comprising: 

an encryption rule storing portion that stores rule information that indicates an encryption 
rule of the information for each secret level that is a level of wanting to keep information secret; 

a transmitting portion that transmits encryption data that is necessary for encrypting 
information in accordance with the rule to the information management system; 

a receiving portion that receives process information that indicates the encryption 
process performed by the information management system from the information management 
system; 



4 



Serial No. 10/763,275 
a monitoring portion that monitors whether or not the encryption of information is 

performed in accordance with the rule by the information management system on the basis of 

the process information received from the information management system; and 

a warning portion that warns the information management system that was found to 

encrypt information not in accordance with the rule by the monitoring portion to do encryption of 

information in accordance with the rule. 

7. (PREVIOUSLY PRESENTED) An encryption support system according to claim 
6, further comprising a validity monitoring portion that monitors validity of an encryption rule that 
is used currently in accordance with vulnerability information about vulnerability of security 
received from a security information providing portion, wherein 

the transmitting portion transmits the encryption data for changing the rule appropriately 
to the information management system if it is decided that the encryption rule that is used 
currently has little validity. 

8. (CURRENTLY AMENDED) A computer -readable storage storing a program 
product for us e i n a comput e r supporting encryption of information for an information 
management system that manages information, the comput e r program product causing the 
computer to execute a process comprising: 

transmitting rule information that indicates an encryption rule of the information for each 
secret level that is a level of wanting to keep information secret and encryption data that is 
necessary for encrypting information in accordance with the rule to the information management 
system; 

receiving process information that indicates the encryption process performed by the 
information management system from the information management system; 

monitoring whether or not the encryption of information is performed in accordance with 
the rule by the information management system on the basis of the process information received 
from the information management system; and 

warning the information management system that was found to encrypt information not in 
accordance with the rule by the monitoring means to do encryption of information in accordance 
with the rule. 
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9. (PREVIOUSLY PRESENTED) A method, comprising: 

monitoring whether data is encrypted in accordance with a predetermined encryption rule 
for a security level; and 

producing a warning if the data is not encrypted in accordance with the encryption rule. 

1 0. (PREVIOUSLY PRESENTED) A method, comprising: 

monitoring whether an information management system encrypts data in accordance with 
an encryption rule associated with a security level of the information management system; and 

warning the information management system if the data is not encrypted in accordance 
with the encryption rule. 

11 . (NEW) A security system comprising an information management system that 
manages and encrypts information and an encryption support system that supports encryption of 
information performed by the information management system, 

the encryption support system comprising: 

an encryption rule storing portion that stores rule information that indicates an 
encryption rule for encrypting information for each encryption rank corresponding to an 
importance of information under an encryption policy, 

an encryption data transmitting portion that transmits encryption data that is 
necessary for encrypting information in accordance with the encryption rule to the information 
management system, 

a process information receiving portion that receives process information that 
indicates encryption of information performed by the information management system from the 
information management system, 

a monitoring portion that monitors whether or not the encryption of information is 
performed in accordance with the encryption rule by the information management system on the 
basis of the process information received from the information management system, and 

a compliance portion that orders the information management system, if found 
not to encrypt information in accordance with the encryption rule, to encrypt information in 
accordance with the encryption rule, and 

the information management system comprising: 

an encryption data receiving portion that receives the encryption data from the 
encryption support system, 
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an encryption rank classification storing portion that stores classification of 
information managed by the information management system in connection with encryption rank 
for each classification, 

an encrypting portion that encrypts information managed by the information 
management system by using the encryption data on the encryption rank corresponding to 
classification of the information to be encrypted, 

an information storing portion that stores the information encrypted by the 
encrypting portion, and 

a process information transmitting portion that transmits process information that 
indicates the encryption of the information performed by the encrypting portion to the encryption 
support system. 
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